Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/016866f47f1d36cd2952818969a2918e80356194.roa
File:                     016866f47f1d36cd2952818969a2918e80356194.roa (raw, json)
Hash identifier:          HQ55odMaxUc44ccOBm6S4Rd4vTRpv4LXCObyZRgDjT4=
Subject key identifier:   3C:00:83:30:D2:50:8A:6D:EA:0C:12:27:9D:6A:85:72:59:27:D1:BD
Certificate issuer:       /CN=61dee5b94933b1c10377fd86ec970d3b4117ae3d
Certificate serial:       20A92F
Authority key identifier: CC:E9:F3:9E:8F:65:08:D4:CB:E1:EE:25:A5:CB:1C:73:05:6D:6C:93
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61dee5b94933b1c10377fd86ec970d3b4117ae3d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/016866f47f1d36cd2952818969a2918e80356194.roa
Signing time:             Fri 12 May 2023 19:37:20 +0000
ROA not before:           Thu 11 May 2023 19:37:17 +0000
ROA not after:            Mon 12 May 2025 19:37:17 +0000
asID:                     10620
IP address blocks:        190.242.72.0/21 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2140463 (0x20a92f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61dee5b94933b1c10377fd86ec970d3b4117ae3d
        Validity
            Not Before: May 11 19:37:17 2023 GMT
            Not After : May 12 19:37:17 2025 GMT
        Subject: CN=016866f47f1d36cd2952818969a2918e80356194
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:19:04:64:e5:8e:0f:8e:a7:29:9f:12:e0:fb:
                    01:d6:55:4f:48:38:80:84:7a:10:80:05:ba:8c:09:
                    d1:30:12:b4:9e:0b:dd:68:d7:d0:e6:c4:5e:af:c8:
                    91:40:e7:42:40:67:60:0b:e4:ea:e2:fe:c8:0c:80:
                    00:ce:46:3a:11:ee:04:05:26:f4:ea:87:8c:2c:a7:
                    fa:86:83:d6:2b:66:e8:66:13:b8:d9:93:3d:d0:12:
                    7c:7d:24:73:8f:07:fb:43:a4:34:d4:58:0f:82:98:
                    f0:92:a1:f8:d8:66:ed:bd:9a:98:9b:09:58:25:ef:
                    b0:c9:b4:77:03:fb:c1:d0:a4:ef:43:71:e4:46:3b:
                    6f:18:b6:a7:d0:ee:ac:f3:0e:e3:43:74:21:40:68:
                    1d:da:2b:55:24:aa:e9:8f:79:f1:b4:13:d4:30:74:
                    4e:97:3f:ce:0c:af:3e:bc:4a:27:e0:d2:8b:4a:1b:
                    02:cb:52:33:c5:47:35:06:d5:9e:bf:eb:21:17:41:
                    4a:87:54:14:12:85:d2:2c:7f:0e:b5:1a:82:dc:8f:
                    81:bb:0b:73:e5:b2:08:7e:bc:d9:69:e8:fc:93:54:
                    01:46:c7:68:dd:b8:52:0e:b7:e0:12:9c:df:c9:47:
                    47:22:91:e8:51:96:f2:e7:7b:50:8a:8d:38:3d:e2:
                    8d:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:00:83:30:D2:50:8A:6D:EA:0C:12:27:9D:6A:85:72:59:27:D1:BD
            X509v3 Authority Key Identifier:
                keyid:CC:E9:F3:9E:8F:65:08:D4:CB:E1:EE:25:A5:CB:1C:73:05:6D:6C:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61dee5b94933b1c10377fd86ec970d3b4117ae3d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/016866f47f1d36cd2952818969a2918e80356194.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/61dee5b94933b1c10377fd86ec970d3b4117ae3d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.242.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7a:09:4e:fb:b9:83:3e:a0:21:4d:a5:6f:6e:36:ba:d4:91:9c:
         30:c8:1f:dd:7b:2f:69:51:0e:1b:ca:32:76:d7:0e:b4:27:47:
         61:b6:19:7f:81:bf:10:ae:65:c6:5a:fb:69:8f:e2:85:3a:40:
         b2:ef:23:47:e7:3d:30:21:b1:d6:d7:03:82:85:57:b4:20:10:
         85:1b:1b:af:72:e7:7e:df:db:84:a5:5a:15:8e:29:d9:47:99:
         e9:32:83:9c:83:ac:ae:4a:2b:5c:d5:a4:f5:52:4f:66:39:d5:
         7e:48:c2:bc:77:11:36:ae:ed:b7:5f:3d:e9:07:2f:45:9e:df:
         ec:b0:ee:c5:6e:50:78:ab:06:e5:9c:ef:76:61:c2:98:7b:b3:
         ba:e0:9b:3c:a2:2a:ff:e8:e0:4e:8d:36:e3:a6:85:7a:4d:b7:
         da:69:6f:41:be:91:8e:90:6e:87:a1:5e:3b:c0:c6:1c:91:94:
         31:55:ec:1d:13:7c:62:3d:00:d8:ae:58:4d:d9:5a:a7:65:e5:
         b3:c8:28:43:df:fc:52:c1:9a:56:b7:29:57:01:08:c5:80:c9:
         7e:82:63:43:17:01:ba:79:3a:bd:bb:c2:cc:9c:27:86:c6:9d:
         a0:0c:0d:e0:c1:49:7d:ee:27:c1:ad:b6:22:a3:f1:bd:97:75:
         74:50:e1:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----